Skip to content

Laravel 12.46.0 Shift #2081

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
lancepioch wants to merge 2 commits into from
+248 −248
Closed

Laravel 12.46.0 Shift #2081

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
93a0ccd
Bump Laravel version constraint
laravel-shift Jan 8, 2026
2c17909
composer update
laravel-shift Jan 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions composer.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
"filament/filament": "~4.0",
"gboquizosanchez/filament-log-viewer": "^2.1",
Copy link
Member

@rmartinoscar rmartinoscar Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please bump this to v2.2.1

Suggested change
"gboquizosanchez/filament-log-viewer": "^2.1",
"gboquizosanchez/filament-log-viewer": "^2.2",

"guzzlehttp/guzzle": "^7.10",
"laravel/framework": "^12.37",
"laravel/framework": "^12.46",
Copy link

@coderabbitai coderabbitai bot Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

Laravel 12.46.0 release notes breaking changes

💡 Result:

I couldn't find any Laravel release tagged 12.46.0. Laravel's docs state that minor and patch releases should never contain breaking changes, and the 12.x release/upgrade notes list the (documented) breaking/minimal changes for upgrading to 12.0. See Laravel release notes and upgrade guide. [1][2]

If you meant a different tag (for example 12.4.6, 12.46—a different major, or a package release), tell me the exact version or paste the release link and I’ll fetch the release notes and highlight any breaking changes.

Sources:

  • Laravel release notes (states minor/patch releases should not contain breaking changes). [1]
  • Laravel 12 upgrade guide (documents breaking/minimal changes when moving to 12.x). [2]

References:
[1] https://laravel.com/docs/12.x/releases. (laravel.com)
[2] https://laravel.com/docs/12.x/upgrade. (laravel.com)

Citations:

🌐 Web query:

Laravel 12.46 security advisories vulnerabilities

💡 Result:

I searched current advisories. Short summary:

  • I found no public security advisory specifically referencing "12.46". (No results for a 12.46-specific advisory.) [1][2]
  • Known/important Laravel advisories that may be relevant:
    • Environment-manipulation via query string (CVE-2024-52301) — high severity; patched in specific older releases (see advisory). [3][4]
    • Reflected XSS in debug-mode error page (CVE-2024-13918 / GHSA-546h-56qp-8jmw) — affected 11.9.0–11.35.1; patched in 11.36.0. [5]
    • Improper-neutralization / file validation bypass disclosed March 2025 (SNYK/CVE entry) — affects versions <11.44.1 and >=12.0.0,<12.1.1; upgrade to 12.1.1+ or 11.44.1+ recommended. [6]
    • The Laravel framework security advisories list and timeline are maintained in the repo. Check it for newly published advisories. [2]

Actionable next steps:

  • If you run composer-managed Laravel apps, run composer update (or inspect composer.lock) to ensure laravel/framework is at the latest patch for your 12.x line; upgrade to the newest 12.x patch if available. Verify patched versions in the Laravel releases/changelog and the framework security advisories before deploying. [1][2][6]
  • Subscribe/watch the Laravel framework security advisories (GitHub) and Snyk/NVD for new CVEs and patches. [2][3][6]

Sources:
[1] Laravel releases & support (docs).
[2] laravel/framework — Security Advisories (GitHub).
[3] NVD / CVE-2024-52301.
[4] CVE details / vendor references.
[5] GHSA / CVE-2024-13918 (GitHub Advisory).
[6] Snyk advisory (Improper Neutralization / CVE-2025-27515).

Would you like me to check the exact laravel/framework version in your composer.lock and tell whether 12.46 (if present) is vulnerable?

🌐 Web query:

Laravel 12 latest version releases 12.0 12.1 12.2

💡 Result:

Laravel 12 release dates:

  • 12.0 — February 24, 2025. [1]
  • 12.1 — July 8, 2025. [2]
  • 12.2 — July 22, 2025. [2][3]

Sources: [1] Laravel News — Laravel 12 release date; [2] VersionLog — Laravel 12.0 release history (lists 12.1 & 12.2 dates); [3] Laravel News — Laravel 12.2 release notes.

🌐 Web query:

Laravel framework version history 12.x releases

💡 Result:

Laravel 12 — summary and release history

  • Initial release: Laravel 12.0.0 — February 24, 2025. [1]
  • Release focus: minimal breaking changes; new application starter kits (React, Vue, Livewire) and dependency updates. [1][3]
  • Notable 12.x changelog items (examples): new @hasstack Blade directive, route:list --middleware filter, WithCachedRoutes testing trait, Factory::insert(), Str/Stringable::ucwords, queue:work --verbose, Uri implements JsonSerializable, doesntStartWith()/doesntEndWith() — full changelog contains detailed per-patch entries. [2][3]

For the complete list of 12.x patch/minor releases and individual change entries, see the official Laravel 12.x release notes and changelog. [1][2]

Sources:
[1] Laravel — Release Notes (12.x).
[2] Laravel — Changelog (12.x).
[3] Laravel News — “Laravel 12 release date” / coverage.

Laravel version 12.46.0 does not exist—Composer dependency will fail to resolve.

Laravel's latest 12.x releases are 12.0 (Feb 2025), 12.1 (Jul 2025), and 12.2 (Jul 2025). The constraint "^12.46" requires Laravel 12.46 or higher, which does not exist. Update to a valid version such as "^12.2" (current latest) or the intended minor version.

🤖 Prompt for AI Agents 
In @composer.json at line 18, The composer.json dependency constraint for the
package "laravel/framework": "^12.46" is invalid because no 12.46 release
exists; update that constraint to a valid release (e.g., change the
"laravel/framework" version string to "^12.2" or the intended minor version) and
then run composer validate and composer update to ensure the lockfile and
dependencies resolve correctly.

"laravel/helpers": "^1.7",
"laravel/sanctum": "^4.2",
"laravel/socialite": "^5.23",
Expand Down Expand Up @@ -98,4 +98,4 @@
},
"minimum-stability": "stable",
"prefer-stable": true
}
}
Loading